Forum Thread: vulnearbility reports unavailable

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Open Discussions

This thread has been marked as resolved.
steffens vulnearbility reports unavailable
Member 5th Jun, 2015 07:37
Ranking: 53
Posts: 80
User Since: 25th Jul, 2009
System Score: N/A
Location: US
So today, as is my custom, I made my weekly pilgrimage to Secunia to read up on the most recent vulnerabilities. But when I got here, I found this:

The Secunia Advisory pages on
secunia.com are being restructured and
therefore unavailable.

Can't remember the last time I saw a web page that was "Under Construction". I'll bet it's been 10 years, at least.

And I'm surprised that in 2015 *any* company would pull down a valuable set of working web pages *before* they had a suitable replacement for them.

But sometimes reality *IS* stranger than fiction.
-- EstherD

Post "RE: vulnearbility reports unavailable" has been selected as an answer.
klausus02 RE: vulnearbility reports unavailable
Member 7th Jun, 2015 10:00
Score: 89
Posts: 144
User Since: 4th Feb 2011
System Score: N/A
Location: DE
Was this reply relevant?
+0
-0
lmacri RE: vulnearbility reports unavailable
Member 9th Jun, 2015 18:23
Score: 47
Posts: 99
User Since: 9th Sep 2009
System Score: N/A
Location: CA
Hi steffens:

I e-mailed Secunia customer service today (09-Jun-2015) regarding the Secunia Advisories site and their response was that "The community page will be up and running again by next week.".



--
32-bit Vista Home Premium SP2 * FF ESR v52.9.0 * NS v22.15.1.8 * PSI v3.0.0.11005
Was this reply relevant?
+0
-0
klausus02 RE: vulnearbility reports unavailable
Member 13th Jun, 2015 09:09
Score: 89
Posts: 144
User Since: 4th Feb 2011
System Score: N/A
Location: DE
Last edited on 13th Jun, 2015 09:14
@Kasper Lindgaard
@Secunia Official

The advisory page is unavailable for more than one week now!

Let me ask a few questions to enlighten some points:

On the "About the team" page you write: "Kasper Lindgaard works
closely with software vendors and the security community to ensure ...".

How does your understanding of close collaboration with the community
looks like? Isn't is your duty to make sure that the advisory pages are
availible?

On your "Out Commitment"-page it is written that "Secunia support staff
frequently participates in threads to help with issues related to updating
software and how to use and interpret the results of the Secunia PSI.
Secunia Research will also post information about vulnerabilities discovered
by Secunia in the forum".

If I were a potential customer I would think: yes, Secunia Officials
pay attention to the forum. And yes, there are a lot of posts from Secunia
Officials indicating the 'frequently participation in threads'.

But reality seems to be different! Do I misunderstand these sentences?
Or doen't Secunia have enough manpower?
How many employees are actually working as Secunia?

I would be glad to have some some of Secunia's explanation.

-regards
Klaus
Was this reply relevant?
+0
-0
klausus02 RE: vulnearbility reports unavailable
Member 16th Jun, 2015 18:24
Score: 89
Posts: 144
User Since: 4th Feb 2011
System Score: N/A
Location: DE
FIXED! The advisory page is available again. Good job.

... still waiting for some short explanation to my questions..

- regards
Klaus
Was this reply relevant?
+0
-0
steffens RE: vulnearbility reports unavailable
Member 17th Jun, 2015 04:36
Score: 53
Posts: 80
User Since: 25th Jul 2009
System Score: N/A
Location: US
on 16th Jun, 2015 18:24, klausus02 wrote:
FIXED! The advisory page is available again. Good job.


IMHO, the terms "FIXED" and "Good job" are significant overstatements when applied to this situation.

The "Community" page is VERY SLOW to load, and comprises a bunch of flashy graphics, but very little useable information.

There is a section labelled "Latest advisories" that contains a bunch of logos from well-known software publishers. Some of the logos do not display properly (broken links, apparently). NONE of the logos are clickable as of this writing (tested in Firefox 38.0.5 and Chrome 43.0.2357.124, which are both the latest versions available).

The "Advisories" link at the top of the page leads to a page that look superficially like the old Advisories page. It has the "Highlights" and the "Most popular" sections from the old page, BUT it lacks the list of most recent advisories AND the associated link that used to lead to the full database.

Instead, there is a link labelled "Database" at the top of the page. But THAT link leads to a page labelled "Historic Advisories" AND it is exactly what it purports to be, namely "Advisories that are older than 9 months". i.e older than 19th Sep, 2014.

So WHERE are the CURRENT advisories?! They must exist somewhere, because I can find several recent ones (using a search page that I would characterize as barely functional). But I've looked and looked, and I cannot find ANY way to access the COMPLETE list of CURRENT Advisories. And THAT is what I (used to) come here to read every week.

-- EstherD
Was this reply relevant?
+2
-0
klausus02 RE: vulnearbility reports unavailable
Member 17th Jun, 2015 12:52
Score: 89
Posts: 144
User Since: 4th Feb 2011
System Score: N/A
Location: DE
@EstherD
Ooops... I have not looked closely enough. You are absolutely right.
So my statement referred to the fact that advisory pages are availible at all.

-regards
Klaus
Was this reply relevant?
+0
-0
Imaging RE: vulnearbility reports unavailable
Member 17th Jun, 2015 20:22
Score: 3
Posts: 1
User Since: 14th Nov 2014
System Score: N/A
Location: US
on 17th Jun, 2015 04:36, steffens wrote:


So WHERE are the CURRENT advisories?! They must exist somewhere, because I can find several recent ones (using a search page that I would characterize as barely functional). But I've looked and looked, and I cannot find ANY way to access the COMPLETE list of CURRENT Advisories. And THAT is what I (used to) come here to read every week.

-- EstherD


Try:

http://secunia.com/advisories/search/?search=2015&...

Note that you need to be logged in to see the results.
Was this reply relevant?
+3
-0
steffens RE: vulnearbility reports unavailable
Member 17th Jun, 2015 22:02
Score: 53
Posts: 80
User Since: 25th Jul 2009
System Score: N/A
Location: US
Close... But close only counts in horseshoes (and hand grenades).

It still requires interacting with the barely functional search and search results pages: Doubled scroll bars, and the ubiquitous "Would you like to talk to us? Contact Secunia Or visit us here" stuff splatted over the middle of the results page. Oh, and possibly because of said splat, the "Next 25 matches" link CANNOT be clicked. (But I CAN at least SORT the results by date, so there is SOMETHING that is working correctly! ;)

[ Tested on latest Firefox and Chrome builds on both Mac and PC desktops. No joy to be found anywhere. Guess nobody tests on DESKTOP browsers anymore, perhaps because the ONLY platforms of interest these days are MOBILE. ]

So it goes...
-- EstherD

Was this reply relevant?
+1
-0
nonenone RE: vulnearbility reports unavailable
Member 18th Jun, 2015 14:55
Score: 0
Posts: 1
User Since: 30th Apr 2014
System Score: N/A
Location: US
The list of recent vulnerabilities is definitely broken. The page http://secunia.com/advisories/historic/ used to list the most recent vulnerabilities. It now only lists vulns that are very old.

Secunia - What is going on here? I utilize my daily visits to your site to not only see what was recently released but to comply with my various requirements to receive information about newly release vulns. I've been telling auditors for years that Secunia is the best place for this information.

What do we do now?
Was this reply relevant?
+0
-0
LeendertKip RE: vulnearbility reports unavailable
Member 18th Jun, 2015 15:05
Score: 35
Posts: 110
User Since: 13th Feb 2010
System Score: N/A
Location: NL
It's clear that Secunia support is not or seldom active in the forum. There's little chance they read these posts. Try a mail to support@secunia.com with your questions. Maybe you have luck and they respond.
Was this reply relevant?
+0
-0
This user no longer exists RE: vulnearbility reports unavailable
Secunia Official 19th Jun, 2015 14:42
Hi Everyone,

We have made a seperate post regarding this issue:
https://secunia.com/community/forum/thread/show/15...

steffens RE: vulnearbility reports unavailable
Member 25th Jun, 2015 22:55
Score: 53
Posts: 80
User Since: 25th Jul 2009
System Score: N/A
Location: US
The previous post explains the current situation very well, so not much point in keeping this thread going any longer...
-- EstherD
Was this reply relevant?
+0
-0

This thread has been marked as locked.